I just got an e-mail that looked just like the usual notice from Amazon that an item has shipped. The shipping address was not to my house, however.

My first thought was that somebody had hacked my Amazon account. When I clicked on "track my orders," it redirected me to some bogus site and then quickly to my Amazon log in page. I then looked back at the return email address and it was from somebody at a yahoo.com email address. No doubt this is designed to get your Amazon user name and password.

I've since changed my Amazon password and confirmed that indeed there are no open orders.